Vulnerabilidades do Jenkins Project Jenkins Contrast Continuous Application Security Plugin
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Jenkins Project Jenkins Contrast Continuous Application Security Plugin: 3 registro(s), com versões afetadas e correções.
CVE-2026-57299
Média · 4.3
CWE-862 24/06/2026
Missing Authorization em Jenkins Contrast Continuous Application Security
Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.
CVE-2026-57298
Média · 5.4
CWE-352 24/06/2026
Cross-Site Request Forgery (CSRF) em Jenkins Project Jenkins Contrast Continuous Application Security Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins connect to an attacker-specified URL using an attacker-specified username, API key, and service key.
CVE-2026-57297
Média · 4.3
CWE-862 24/06/2026
Missing Authorization em Jenkins Contrast Continuous Application Security
A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.